mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-01 05:45:45 +00:00
Code Issues Releases Activity

security/vuxml: Document LibreSSL vulnerabilities

Browse Source 
Reviewed by:	swills
MFH:		2016Q3
This commit is contained in:
Bernard Spil 2016-05-03 17:56:24 +00:00
parent f7c15cbaac
commit 0e62d5880d
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=414544
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
security/vuxml/vuln.xml
View File

@ -58,6 +58,44 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="01d729ca-1143-11e6-b55e-b499baebfeaf">
<topic>LibreSSL -- multiple vulnerabilities</topic>
<affects>
<package>
<name>libressl</name>
<range><lt>2.3.4</lt></range>
</package>
<package>
<name>libressl-devel</name>
<range><lt>2.3.4</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>OpenBSD reports:</p>
<blockquote cite="https://marc.info/?l=openbsd-tech&amp;m=146228598730414">
<p>Memory corruption in the ASN.1 encoder</p>
<p>Padding oracle in AES-NI CBC MAC check</p>
<p>EVP_EncodeUpdate overflow</p>
<p>EVP_EncryptUpdate overflow</p>
<p>ASN.1 BIO excessive memory allocation</p>
</blockquote>
</body>
</description>
<references>
<url>https://marc.info/?l=openbsd-tech&amp;m=146228598730414</url>
<url>CVE-2016-2108</url>
<url>CVE-2016-2107</url>
<url>CVE-2016-2105</url>
<url>CVE-2016-2106</url>
<url>CVE-2016-2109</url>
</references>
<dates>
<discovery>2016-05-03</discovery>
<entry>2016-05-03</entry>
</dates>
</vuln>
<vuln vid="95564990-1138-11e6-b55e-b499baebfeaf">
<topic>OpenSSL -- multiple vulnerabilities</topic>
<affects>